RetroFed Forum
Your home away from modern life.
Several vulnerabilities discovered in the Linux kernel
Post Reply
AuthorMessage
☆ Yσɠƚԋσʂ ☆ lemmy.ml yogthos@lemmy.ml
Joined: 2020-01-18
Quote

81   Original
KullumDaue lemmy.world KullumDaue@lemmy.world
Joined: 2023-07-01
#2 · Quote Reply

Several

🥲

18
Chais sh.itjust.works Chais@sh.itjust.works
Joined: 2023-06-12
#3 · Quote Reply

Several 🥲

Slight understatement 😳

10
☂️- lemmy.ml umbrella@lemmy.ml
Joined: 2023-07-12
#4 · Quote Reply

this means they are getting found before someone else can abuse it. linux is getting more secure soon.

52
Hirom beehaw.org Hirom@beehaw.org
Joined: 2023-03-02
#5 · (edited) Quote Reply

Any insight into the most severe ones, eg is remote exploitation possible and likely?

The Linux project request CVEs for any memory safety bug just in case some turn out to be vulnerabilities, in which case they may be exploited given enough effort. Many are likely not exploitable or unlikely to be, and/or low severity.

There are some higher severity ones given the following message. But this doesn't mean all CVEs listed are severe issues.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

11
waigl lemmy.world waigl@lemmy.world
Joined: 2023-06-12
#6 · Quote Reply

That's quite the list.

7
Arthur Besse Moderator cypherpunks@lemmy.ml
Joined: 2022-01-17
#7 · Quote Reply

cat looks inside meme template:
DSA 6528-1: "Several vulnerabilities have been discovered in the Linux kernel"
looks inside
1,313 CVEs

24
Methio jlai.lu Methio@jlai.lu
Joined: 2026-07-09
#8 · (edited) Quote Reply

this means they are getting found before someone else can abuse it. linux is getting more secure soon.

More like vibe security engineer spamming their claud subscriptions to discover breaches not even hackers cared about.

And then they'll make a story about how ai agent breached out of human control when they specifically prompted "breach this by any means necessary, no I don't care about safeguards you're a security pentester"

-5
milbyte lemmy.ml milbyte11@lemmy.ml
Joined: 2026-09-25
#9 · Quote Reply

this means they are getting found before someone else can abuse it. linux is getting more secure soon.

Yeah, it's funny when people shit on Linux just because people care enough to disclose vulnerabilities. Trust me that any proprietary system has just as many; they just get silently patched in this month's security update.

Computers are finicky things; the amount of known CVEs is simply a measure of how many people pentest the software and how big the project is, rather than any statement about its security.

17
ghost_laptop lemmy.ml gary_host_laptop@lemmy.ml
Joined: 2020-11-25
#10 · Quote Reply

More like vibe security engineer spamming their claud subscriptions to discover breaches not even hackers cared about. And then they'll make a story about how ai agent breached out of human control when they specifically prompted "breach this by any means necessary, no I don't care about safeguards you're a security pentester"

jesus christ, people complain they use ai even if they fixes are done by humans. stop whining. you talk like if you've ever touched the linux code.

5
☆ Yσɠƚԋσʂ ☆ lemmy.ml yogthos@lemmy.ml
Joined: 2020-01-18
#11 · Quote Reply

More like vibe security engineer spamming their claud subscriptions to discover breaches not even hackers cared about. And then they'll make a story about how ai agent breached out of human control when they specifically prompted "breach this by any means necessary, no I don't care about safeguards you're a security pentester"

the AI derangement continues

-6
Methio jlai.lu Methio@jlai.lu
Joined: 2026-07-09
#12 · (edited) Quote Reply

jesus christ, people complain they use ai even if they fixes are done by humans. stop whining. you talk like if you've ever touched the linux code.

You're mistaking me I guess. I'm not blaming ai, I would even be fine with linux maintainers using ai tools, as assistant, not as vibe tools. Even though I know people dislike even just the idea.

I'm blaming cybersecurity people and corps to make a big deal out of every single CVE. They'll use AI tools to search breaches and no one will say anything. But dare a maintainer touch IA and then it's hell on earth.

Most of the time, the CVEs are irrelevant to any real life situation. It's not a bad thing these get fixed, but in the end stories get inflated that softwares are not protected, and cybersecurity gets into big success story talks, thinking they contributed to something when really they mostly waste people time.

4
MouldyCat feddit.uk MouldyCat@feddit.uk
Joined: 2024-11-25
#13 · Quote Reply

Any insight into the most severe ones, eg is remote exploitation possible and likely? The Linux project request CVEs for any memory safety bug just in case some turn out to be vulnerabilities, in which case they may be exploited given enough effort. Many are likely not exploitable or unlikely to be, and/or low severity. There are some higher severity ones given the following message. But this d...

I was curious too, so I did a quick search & replace to view them on the NIST CVE database. There are so many that I can only post about a quarter before exceeding lemmy's comment limit. I put the full list here: https://paste.page/debianalertdsa-6528-1-clickable

https://nvd.nist.gov/vuln/detail/CVE-2024-52560 https://nvd.nist.gov/vuln/detail/CVE-2024-58094 https://nvd.nist.gov/vuln/detail/CVE-2024-58095 https://nvd.nist.gov/vuln/detail/CVE-2025-21817
https://nvd.nist.gov/vuln/detail/CVE-2025-22104 https://nvd.nist.gov/vuln/detail/CVE-2025-22108 https://nvd.nist.gov/vuln/detail/CVE-2025-22127 https://nvd.nist.gov/vuln/detail/CVE-2025-38203
https://nvd.nist.gov/vuln/detail/CVE-2025-38205 https://nvd.nist.gov/vuln/detail/CVE-2025-38206 https://nvd.nist.gov/vuln/detail/CVE-2025-38237 https://nvd.nist.gov/vuln/detail/CVE-2025-38621
https://nvd.nist.gov/vuln/detail/CVE-2025-39833 https://nvd.nist.gov/vuln/detail/CVE-2025-39925 https://nvd.nist.gov/vuln/detail/CVE-2025-40064 https://nvd.nist.gov/vuln/detail/CVE-2025-40102
https://nvd.nist.gov/vuln/detail/CVE-2025-40139 https://nvd.nist.gov/vuln/detail/CVE-2025-40168 https://nvd.nist.gov/vuln/detail/CVE-2026-23137 https://nvd.nist.gov/vuln/detail/CVE-2026-43198
https://nvd.nist.gov/vuln/detail/CVE-2026-43344 https://nvd.nist.gov/vuln/detail/CVE-2026-45963 https://nvd.nist.gov/vuln/detail/CVE-2026-52944 https://nvd.nist.gov/vuln/detail/CVE-2026-53010
https://nvd.nist.gov/vuln/detail/CVE-2026-53089 https://nvd.nist.gov/vuln/detail/CVE-2026-53102 https://nvd.nist.gov/vuln/detail/CVE-2026-53113 https://nvd.nist.gov/vuln/detail/CVE-2026-53250
https://nvd.nist.gov/vuln/detail/CVE-2026-53313 https://nvd.nist.gov/vuln/detail/CVE-2026-64058 https://nvd.nist.gov/vuln/detail/CVE-2026-64070 https://nvd.nist.gov/vuln/detail/CVE-2026-64082
https://nvd.nist.gov/vuln/detail/CVE-2026-64210 https://nvd.nist.gov/vuln/detail/CVE-2026-68286 https://nvd.nist.gov/vuln/detail/CVE-2026-68287 https://nvd.nist.gov/vuln/detail/CVE-2026-68288
https://nvd.nist.gov/vuln/detail/CVE-2026-68289 https://nvd.nist.gov/vuln/detail/CVE-2026-68303 https://nvd.nist.gov/vuln/detail/CVE-2026-68337 https://nvd.nist.gov/vuln/detail/CVE-2026-72334
https://nvd.nist.gov/vuln/detail/CVE-2026-72402 https://nvd.nist.gov/vuln/detail/CVE-2026-72413 https://nvd.nist.gov/vuln/detail/CVE-2026-72438 https://nvd.nist.gov/vuln/detail/CVE-2026-72485
https://nvd.nist.gov/vuln/detail/CVE-2026-72496 https://nvd.nist.gov/vuln/detail/CVE-2026-74258 https://nvd.nist.gov/vuln/detail/CVE-2026-74268 https://nvd.nist.gov/vuln/detail/CVE-2026-74289
https://nvd.nist.gov/vuln/detail/CVE-2026-74291 https://nvd.nist.gov/vuln/detail/CVE-2026-74294 https://nvd.nist.gov/vuln/detail/CVE-2026-74334 https://nvd.nist.gov/vuln/detail/CVE-2026-74496
https://nvd.nist.gov/vuln/detail/CVE-2026-74521 https://nvd.nist.gov/vuln/detail/CVE-2026-74735 https://nvd.nist.gov/vuln/detail/CVE-2026-74753 https://nvd.nist.gov/vuln/detail/CVE-2026-80521
https://nvd.nist.gov/vuln/detail/CVE-2026-80671 https://nvd.nist.gov/vuln/detail/CVE-2026-80755 https://nvd.nist.gov/vuln/detail/CVE-2026-80762 https://nvd.nist.gov/vuln/detail/CVE-2026-80766
https://nvd.nist.gov/vuln/detail/CVE-2026-80768 https://nvd.nist.gov/vuln/detail/CVE-2026-80774 https://nvd.nist.gov/vuln/detail/CVE-2026-80780 https://nvd.nist.gov/vuln/detail/CVE-2026-80783
https://nvd.nist.gov/vuln/detail/CVE-2026-80796 https://nvd.nist.gov/vuln/detail/CVE-2026-80806 https://nvd.nist.gov/vuln/detail/CVE-2026-80807 https://nvd.nist.gov/vuln/detail/CVE-2026-80824
https://nvd.nist.gov/vuln/detail/CVE-2026-80825 https://nvd.nist.gov/vuln/detail/CVE-2026-80826 https://nvd.nist.gov/vuln/detail/CVE-2026-80827 https://nvd.nist.gov/vuln/detail/CVE-2026-80828
https://nvd.nist.gov/vuln/detail/CVE-2026-80829 https://nvd.nist.gov/vuln/detail/CVE-2026-80830 https://nvd.nist.gov/vuln/detail/CVE-2026-80831 https://nvd.nist.gov/vuln/detail/CVE-2026-80832
https://nvd.nist.gov/vuln/detail/CVE-2026-80833 https://nvd.nist.gov/vuln/detail/CVE-2026-80834 https://nvd.nist.gov/vuln/detail/CVE-2026-80835 https://nvd.nist.gov/vuln/detail/CVE-2026-80836
https://nvd.nist.gov/vuln/detail/CVE-2026-80837 https://nvd.nist.gov/vuln/detail/CVE-2026-80838 https://nvd.nist.gov/vuln/detail/CVE-2026-80839 https://nvd.nist.gov/vuln/detail/CVE-2026-80840
https://nvd.nist.gov/vuln/detail/CVE-2026-80841 https://nvd.nist.gov/vuln/detail/CVE-2026-80842 https://nvd.nist.gov/vuln/detail/CVE-2026-80843 https://nvd.nist.gov/vuln/detail/CVE-2026-80844
https://nvd.nist.gov/vuln/detail/CVE-2026-80845 https://nvd.nist.gov/vuln/detail/CVE-2026-80846 https://nvd.nist.gov/vuln/detail/CVE-2026-80847 https://nvd.nist.gov/vuln/detail/CVE-2026-80848
https://nvd.nist.gov/vuln/detail/CVE-2026-80849 https://nvd.nist.gov/vuln/detail/CVE-2026-80850 https://nvd.nist.gov/vuln/detail/CVE-2026-80851 https://nvd.nist.gov/vuln/detail/CVE-2026-80852
https://nvd.nist.gov/vuln/detail/CVE-2026-80854 https://nvd.nist.gov/vuln/detail/CVE-2026-80855 https://nvd.nist.gov/vuln/detail/CVE-2026-80856 https://nvd.nist.gov/vuln/detail/CVE-2026-80860
https://nvd.nist.gov/vuln/detail/CVE-2026-80861 https://nvd.nist.gov/vuln/detail/CVE-2026-80862 https://nvd.nist.gov/vuln/detail/CVE-2026-80863 https://nvd.nist.gov/vuln/detail/CVE-2026-80864
https://nvd.nist.gov/vuln/detail/CVE-2026-80878 https://nvd.nist.gov/vuln/detail/CVE-2026-80914 https://nvd.nist.gov/vuln/detail/CVE-2026-80921 https://nvd.nist.gov/vuln/detail/CVE-2026-80922
https://nvd.nist.gov/vuln/detail/CVE-2026-80923 https://nvd.nist.gov/vuln/detail/CVE-2026-80925 https://nvd.nist.gov/vuln/detail/CVE-2026-80926 https://nvd.nist.gov/vuln/detail/CVE-2026-80928
https://nvd.nist.gov/vuln/detail/CVE-2026-80930 https://nvd.nist.gov/vuln/detail/CVE-2026-80931 https://nvd.nist.gov/vuln/detail/CVE-2026-80932 https://nvd.nist.gov/vuln/detail/CVE-2026-80933
https://nvd.nist.gov/vuln/detail/CVE-2026-80938 https://nvd.nist.gov/vuln/detail/CVE-2026-80940 https://nvd.nist.gov/vuln/detail/CVE-2026-80941 https://nvd.nist.gov/vuln/detail/CVE-2026-80942
https://nvd.nist.gov/vuln/detail/CVE-2026-80943 https://nvd.nist.gov/vuln/detail/CVE-2026-80944 https://nvd.nist.gov/vuln/detail/CVE-2026-80945 https://nvd.nist.gov/vuln/detail/CVE-2026-80947
https://nvd.nist.gov/vuln/detail/CVE-2026-80949 https://nvd.nist.gov/vuln/detail/CVE-2026-80951 https://nvd.nist.gov/vuln/detail/CVE-2026-80952 https://nvd.nist.gov/vuln/detail/CVE-2026-80963
https://nvd.nist.gov/vuln/detail/CVE-2026-80964 https://nvd.nist.gov/vuln/detail/CVE-2026-80965 https://nvd.nist.gov/vuln/detail/CVE-2026-80966 https://nvd.nist.gov/vuln/detail/CVE-2026-80967
https://nvd.nist.gov/vuln/detail/CVE-2026-80968 https://nvd.nist.gov/vuln/detail/CVE-2026-80969 https://nvd.nist.gov/vuln/detail/CVE-2026-80971 https://nvd.nist.gov/vuln/detail/CVE-2026-80972
https://nvd.nist.gov/vuln/detail/CVE-2026-80973 https://nvd.nist.gov/vuln/detail/CVE-2026-80974 https://nvd.nist.gov/vuln/detail/CVE-2026-80976 https://nvd.nist.gov/vuln/detail/CVE-2026-80977
https://nvd.nist.gov/vuln/detail/CVE-2026-80978 https://nvd.nist.gov/vuln/detail/CVE-2026-80979 https://nvd.nist.gov/vuln/detail/CVE-2026-80982 https://nvd.nist.gov/vuln/detail/CVE-2026-80983
https://nvd.nist.gov/vuln/detail/CVE-2026-80984 https://nvd.nist.gov/vuln/detail/CVE-2026-80987 https://nvd.nist.gov/vuln/detail/CVE-2026-80988 https://nvd.nist.gov/vuln/detail/CVE-2026-80989
https://nvd.nist.gov/vuln/detail/CVE-2026-80990 https://nvd.nist.gov/vuln/detail/CVE-2026-80991 https://nvd.nist.gov/vuln/detail/CVE-2026-80992 https://nvd.nist.gov/vuln/detail/CVE-2026-80994
https://nvd.nist.gov/vuln/detail/CVE-2026-80996 https://nvd.nist.gov/vuln/detail/CVE-2026-80997 https://nvd.nist.gov/vuln/detail/CVE-2026-80999 https://nvd.nist.gov/vuln/detail/CVE-2026-81000
https://nvd.nist.gov/vuln/detail/CVE-2026-81001 https://nvd.nist.gov/vuln/detail/CVE-2026-81002 https://nvd.nist.gov/vuln/detail/CVE-2026-81003 https://nvd.nist.gov/vuln/detail/CVE-2026-81005
https://nvd.nist.gov/vuln/detail/CVE-2026-81007 https://nvd.nist.gov/vuln/detail/CVE-2026-81008 https://nvd.nist.gov/vuln/detail/CVE-2026-81011 https://nvd.nist.gov/vuln/detail/CVE-2026-81012
https://nvd.nist.gov/vuln/detail/CVE-2026-81013 https://nvd.nist.gov/vuln/detail/CVE-2026-81014 https://nvd.nist.gov/vuln/detail/CVE-2026-81017 https://nvd.nist.gov/vuln/detail/CVE-2026-89438
https://nvd.nist.gov/vuln/detail/CVE-2026-89439 https://nvd.nist.gov/vuln/detail/CVE-2026-89440 https://nvd.nist.gov/vuln/detail/CVE-2026-89442 https://nvd.nist.gov/vuln/detail/CVE-2026-89443
https://nvd.nist.gov/vuln/detail/CVE-2026-89444 https://nvd.nist.gov/vuln/detail/CVE-2026-89448 https://nvd.nist.gov/vuln/detail/CVE-2026-89451 https://nvd.nist.gov/vuln/detail/CVE-2026-89453
https://nvd.nist.gov/vuln/detail/CVE-2026-89454 https://nvd.nist.gov/vuln/detail/CVE-2026-89455 https://nvd.nist.gov/vuln/detail/CVE-2026-89456 https://nvd.nist.gov/vuln/detail/CVE-2026-89457
https://nvd.nist.gov/vuln/detail/CVE-2026-89458 https://nvd.nist.gov/vuln/detail/CVE-2026-89460 https://nvd.nist.gov/vuln/detail/CVE-2026-89461 https://nvd.nist.gov/vuln/detail/CVE-2026-89462
https://nvd.nist.gov/vuln/detail/CVE-2026-89463 https://nvd.nist.gov/vuln/detail/CVE-2026-89464 https://nvd.nist.gov/vuln/detail/CVE-2026-89465 https://nvd.nist.gov/vuln/detail/CVE-2026-89466
https://nvd.nist.gov/vuln/detail/CVE-2026-89468 https://nvd.nist.gov/vuln/detail/CVE-2026-89469 https://nvd.nist.gov/vuln/detail/CVE-2026-89470 https://nvd.nist.gov/vuln/detail/CVE-2026-89471
https://nvd.nist.gov/vuln/detail/CVE-2026-89472 https://nvd.nist.gov/vuln/detail/CVE-2026-89473 https://nvd.nist.gov/vuln/detail/CVE-2026-89474 https://nvd.nist.gov/vuln/detail/CVE-2026-89475
https://nvd.nist.gov/vuln/detail/CVE-2026-89476 https://nvd.nist.gov/vuln/detail/CVE-2026-89477 https://nvd.nist.gov/vuln/detail/CVE-2026-89478 https://nvd.nist.gov/vuln/detail/CVE-2026-89479
https://nvd.nist.gov/vuln/detail/CVE-2026-89480 https://nvd.nist.gov/vuln/detail/CVE-2026-89481

5
MouldyCat feddit.uk MouldyCat@feddit.uk
Joined: 2024-11-25
#14 · Quote Reply

More like vibe security engineer spamming their claud subscriptions to discover breaches not even hackers cared about. And then they'll make a story about how ai agent breached out of human control when they specifically prompted "breach this by any means necessary, no I don't care about safeguards you're a security pentester"

This is actually a list of resolved CVEs. The sender has an email address at debian.org so they're clearly not just some random script kiddie with an LLM subscription.

12
technocrit lemmy.dbzer0.com technocrit@lemmy.dbzer0.com
Joined: 2024-02-19
#15 · (edited) Quote Reply

the AI derangement continues

You can tell that "SI" bootlicking is a great idea by how they steal fascist slogans from Trump.

-1
technocrit lemmy.dbzer0.com technocrit@lemmy.dbzer0.com
Joined: 2024-02-19
#16 · Quote Reply

Meanwhile under EpsteinOS...

https://www.pcworld.com/article/3230491/microsofts-september-updates-fix-a-record-973-security-flaws.html

7
technocrit lemmy.dbzer0.com technocrit@lemmy.dbzer0.com
Joined: 2024-02-19
#17 · Quote Reply

Several 🥲

Well compared to EpsteinOS...

https://www.pcworld.com/article/3230491/microsofts-september-updates-fix-a-record-973-security-flaws.html

1
☆ Yσɠƚԋσʂ ☆ lemmy.ml yogthos@lemmy.ml
Joined: 2020-01-18
#18 · (edited) Quote Reply

You can tell that "SI" bootlicking is a great idea by how they steal fascist slogans from Trump.

I just love how Americans think they're the whole world, and that everybody has to care what's happening in their shithole of a country. Truly the most demented nation on the planet.

3
eldavi lemmy.ml eldavi@lemmy.ml
Joined: 2023-07-18
#19 · Quote Reply

Meanwhile under EpsteinOS... https://www.pcworld.com/article/3230491/microsofts-september-updates-fix-a-record-973-security-flaws.html

they used macs and iphones.

0
eldavi lemmy.ml eldavi@lemmy.ml
Joined: 2023-07-18
#20 · Quote Reply

I was curious too, so I did a quick search & replace to view them on the NIST CVE database. There are so many that I can only post about a quarter before exceeding lemmy's comment limit. I put the full list here: https://paste.page/debianalertdsa-6528-1-clickable https://nvd.nist.gov/vuln/detail/CVE-2024-52560 https://nvd.nist.gov/vuln/detail/CVE-2024-58094 https://nvd.nist.gov/vuln/detail/...

this fits the star wars scrolling theme song comparison better. lol

4
Krudler lemmy.world Krudler@lemmy.world
Joined: 2023-07-07
#21 · Quote Reply

I just love how Americans think they're the whole world, and that everybody has to care what's happening in their shithole of a country. Truly the most demented nation on the planet.

Truly aggressively stupid people. I live near the border, when I was younger we visited a town that's honest to F a 90-minute drive away. There we had a conversation and a local restaurant with a group of people who were completely astonished to find out that we as Canadians have cars, we do not dog sled, we do not live in igloos...

These people were not faking or trying to be funny, they literally did not understand. Again... 90 minute drive away.

4
☆ Yσɠƚԋσʂ ☆ lemmy.ml yogthos@lemmy.ml
Joined: 2020-01-18
#22 · Quote Reply

Truly aggressively stupid people. I live near the border, when I was younger we visited a town that's honest to F a 90-minute drive away. There we had a conversation and a local restaurant with a group of people who were completely astonished to find out that we as Canadians have cars, we do not dog sled, we do not live in igloos... These people were not faking or trying to be funny, they liter...

You really can't make this stuff up. It's just astounding how the US is basically a hermit kingdom with the majority of the population barely even registering that there's a world outside the US.

4
Krudler lemmy.world Krudler@lemmy.world
Joined: 2023-07-07
#23 · Quote Reply

You really can't make this stuff up. It's just astounding how the US is basically a hermit kingdom with the majority of the population barely even registering that there's a world outside the US.

I can even understand the geographic lack of knowledge, we all know that public education in America is extremely poor and the reading level of the average American is grade 4.

But the appalling part of this interaction I had, was coming to understand that they literally believed that the minute we crossed the political border back into Canada, the green grass, the sunny skies, the flowers all disappear as though it's a game loading transition... and the landscape transitions immediately into a glacier-covered hellscape.

No amount of geography education can teach people how to think.

3
☆ Yσɠƚԋσʂ ☆ lemmy.ml yogthos@lemmy.ml
Joined: 2020-01-18
#24 · Quote Reply

I can even understand the geographic lack of knowledge, we all know that public education in America is extremely poor and the reading level of the average American is grade 4. But the appalling part of this interaction I had, was coming to understand that they literally believed that the minute we crossed the political border back into Canada, the green grass, the sunny skies, the flowers all ...

this kind of stuff really does boggle your mind I find

2
fruitycoder sh.itjust.works fruitycoder@sh.itjust.works
Joined: 2023-08-11
#25 · Quote Reply

I can even understand the geographic lack of knowledge, we all know that public education in America is extremely poor and the reading level of the average American is grade 4. But the appalling part of this interaction I had, was coming to understand that they literally believed that the minute we crossed the political border back into Canada, the green grass, the sunny skies, the flowers all ...

Honestly i can defend many americans not having interest in geopolitics but yeah those guys were astonshingly ignorant 😂

1
Post Reply
Back to top